One thing: I find it appalling that user's user_pass is sent in plaintext via email to me on notify of a new registration. How can I censor this so I still receive the email but blank out/censor user_pass.

I've already changed the default email so that the user isn't sent their own user_pass in plaintext (since they set it themselves)